Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Securely Merging Pull Requests from Public Contributors

Intro: Maintainers Caught at a Fork 🍴 How can maintainers safely test forked PRs without exposing sensitive data to potentially untrusted code?

  • Use pullrequesttarget event with elevated GITHUBTOKEN for secure workflows
  • Second approach: workflowrun event for prescan workflow with secret access
  • Third solution: isolated, disposable environments for test runs

The Reminder Queue Refills Only When You Open the App

The bug report was one line from someone testing Lifemaxxing AI : "why did it tell me I got nothing done today, I did everything." He was right, and the notification was working exactly as written.

  • Reminder queue refills only when user opens app
  • Two notifications scheduled: morning and afternoon
  • Bug causes afternoon notification to always be scheduled

Expanding Software Engineering Teams for Social Impact Projects

The Problem: Engineering Capacity Is a Bottleneck Hiring full-time engineers is expensive and competitive, especially on a nonprofit, mission-driven budget.

  • Nonprofits struggle with limited engineering capacity for social impact projects.
  • Open source platforms enable external contributors to augment teams without full-time hires.
  • Specific topic tags and GitHub features enhance discoverability and contribution opportunities.

More from Sunday 13 September →